Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/zryO2kAFw-v00fsYEYoiEHUXmKo.roa
File: zryO2kAFw-v00fsYEYoiEHUXmKo.roa (raw, json)
Hash identifier: lv6IzTqdLhGHZqqXx1ct3E6FJzRcu7ZElUToXAbTAyI=
Subject key identifier: CE:BC:8E:DA:40:05:C3:EB:F4:D1:FB:18:11:8A:22:10:75:17:98:AA
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 01856CE61DB3C2B20FE3A9474BE4047918F9
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/zryO2kAFw-v00fsYEYoiEHUXmKo.roa
Signing time: Sun 01 Jan 2023 10:34:58 +0000
ROA not before: Sun 01 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56563
IP address blocks: 45.154.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:1d:b3:c2:b2:0f:e3:a9:47:4b:e4:04:79:18:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Jan 1 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cebc8eda4005c3ebf4d1fb18118a2210751798aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:7e:3f:c8:d4:68:9d:20:cd:c7:d6:5f:f6:
85:0a:fc:e0:8c:1f:63:37:f0:ec:59:19:40:8c:1d:
68:3b:7f:f4:c3:29:46:b4:13:7d:92:1e:c7:a2:6f:
f9:2f:e2:ec:fe:d0:19:53:9f:f2:a0:8f:66:dc:43:
cd:77:03:b3:fb:bc:03:82:60:6b:6e:59:e5:37:ae:
3a:29:d0:bc:6d:b9:04:cc:90:26:93:63:7f:69:76:
ed:a1:d9:5a:00:0e:99:2c:ff:c2:d9:9a:88:f0:d7:
be:f9:fd:a7:2e:4c:f6:49:8e:db:cf:54:c1:6f:b0:
b7:03:cb:10:84:90:0b:db:db:57:a6:2d:65:4f:8b:
4f:ea:08:53:fb:d6:13:4f:b0:dd:6f:78:e2:11:bd:
43:c8:6e:c0:5b:e6:57:86:ba:a1:81:3a:84:a9:68:
9d:d4:29:13:18:66:4c:a7:c7:04:75:87:16:ca:52:
a7:a5:ad:54:0e:33:7f:7b:f2:d5:85:78:72:09:72:
1e:4d:09:2f:37:c5:a9:8c:d0:9b:8e:63:e0:bd:92:
37:43:96:69:a3:8d:68:68:4f:d4:d7:65:3f:e1:b5:
3f:93:17:80:62:6d:d9:73:d4:0b:60:e7:83:7b:3b:
71:02:d9:51:56:49:c3:d8:8c:63:d2:6e:6b:4a:3a:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:8E:DA:40:05:C3:EB:F4:D1:FB:18:11:8A:22:10:75:17:98:AA
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/zryO2kAFw-v00fsYEYoiEHUXmKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.31.0/24
Signature Algorithm: sha256WithRSAEncryption
67:71:66:65:ec:e2:db:83:64:27:be:f8:6e:77:20:1d:41:87:
8a:e0:db:a3:fa:7c:f6:0f:9f:39:48:5d:2a:3c:18:7e:ea:93:
44:d1:62:bc:bd:13:d9:43:5a:ef:a1:3c:39:25:b5:40:20:1b:
60:67:1b:82:9e:8e:05:a5:59:24:97:83:d0:0d:ad:81:b9:bd:
37:12:6c:68:e8:2e:35:41:93:1d:0f:c4:76:5d:11:f7:ec:eb:
cc:c4:0b:29:fb:33:32:3a:32:30:da:6d:ea:31:24:d0:67:59:
e8:6f:5f:b7:59:91:f0:1e:d2:b0:c6:c5:b8:64:70:70:22:5c:
11:02:4c:18:e4:13:a4:1f:f9:bb:82:64:95:b5:0c:1c:11:19:
17:4f:b4:30:d7:92:26:83:d0:b3:bc:83:98:36:57:8e:24:59:
10:dd:18:43:16:8d:d8:71:37:7a:24:ce:f2:72:bf:e3:06:be:
d4:ba:ae:2d:3e:ea:51:e2:31:18:82:04:81:2c:34:ad:b6:da:
4d:62:ff:2c:5f:21:63:49:17:6a:b8:58:a2:da:6c:d3:d6:7f:
9e:02:1d:7d:08:43:61:21:e2:e9:ae:35:52:b3:cf:51:4e:f3:
2b:6d:dd:0a:38:de:c9:dc:0a:0f:b0:20:47:d7:80:90:91:1e:
c9:dc:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:42 2024 by rpki-client on console-fra.rpki-client.org